User without permission "create" can use "create user panel" bug or feature? CQ/AEM 5.6.1

[Andrey_Alekseev]

Hi guys!

Question about CQ5 permissions.

User without permissions "create \ modify \ delete \ edit ACL \ replicate" can use panel "edit" on page "../useradmin", but if u fill field on a create user window, user not created, can u help? 

Is it right, when user can use panel "edit" without permissions "Edit" ?

[img]1.png[/img]

[img]2.png[/img]

best regards,

Andrey Alekseevskiy

[Sham_HC · Accepted solution]

Hi Andrey Alekseevskiy,

   It is expected that user creation will fail since you do not have permissions.  

The creat user option enabled looks like UI not validating the permissions client side.

Thanks,

Sham

[Andrey_Alekseev]

Thanks!